WINDOWS FAYL TIZIMI VA KRIMINALISTIK TEKSHIRUVLARDA NTFSNING O‘RNI
Keywords:
Windows, NTFS, FAT, MFT, fayl tizimi, kriminalistika, raqamli dalil, klaster, slack, atributlar.Abstract
Ushbu maqolada Windows operatsion tizimlarida ishlatiladigan asosiy fayl tizimlari, ayniqsa NTFS tuzilmasi, uning afzalliklari, xavfsizlik imkoniyatlari va raqamli kriminalistik tekshiruvlarda tutgan o‘rni yoritiladi. Shuningdek, NTFS tizimining asosiy komponentlari, fayl atributlari, MFT (Master File Table) tuzilmasi va ularning dalil sifatidagi ahamiyati tahlil qilinadi.
Downloads
References
Carrier, Brian. File System Forensic Analysis. Addison-Wesley, 2005.
Casey, Eoghan. Digital Evidence and Computer Crime: Forensic Science, Computers, and the Internet. 3rd Edition. Academic Press, 2011.
Tanenbaum, Andrew S. & Herbert Bos. Modern Operating Systems. 4th Edition. Pearson, 2015.
Stallings, William. Operating Systems: Internals and Design Principles. 9th Edition. Pearson, 2017.
Microsoft. NTFS File System Technical Reference. docs.microsoft.com
AccessData. FTK Imager User Guide. AccessData Group LLC.
Guidance Software. EnCase Forensic User Manual. Version 8.09, 2020.
The Sleuth Kit and Autopsy. Rasmiy sayt: www.sleuthkit.org
X-Ways Software. WinHex Forensics Manual. www.x-ways.net
O‘zbekiston Respublikasi “Axborotlashtirish to‘g‘risida”gi Qonuni, 2003 yil.
O‘zbekiston Respublikasi “Shaxsga doir ma’lumotlar to‘g‘risida”gi Qonuni, 2019 yil.
Liu, Wenke & Liu, Anfeng. Research on File System Forensics Techniques. Journal of Forensic Sciences and Cybersecurity, 2022.
Garfinkel, S. L. Digital Forensics Tools: The Next Generation. Communications of the ACM, 2010.
Mandia, K., Prosise, C., & Pepe, M. Incident Response & Computer Forensics. 3rd Edition, McGraw-Hill, 2014.
